METHOD AND APPARATUS FOR STORING AND CONTROLLING ACCESS TO INFORMATION

摘要

A method and system for providing controlled access to information stored on a smartcard. The system includes a data processing center maintained by a trusted third party for storing a database of authorizations of various service providers to access information pertaining to individuals, and for responding to request by service providers for access from terminals which communicate with the data processing center and smartcards storing the individuals information. The information is stored on the smartcard in encrypted form and the data processing center provides an access code, which includes a key for decrypting the information only to service providers who are authorized to access the information. The service provider then sends the access code to the smartcard which verifies the access code and decrypts and outputs the requested information. The smartcard then computes a new key as a function of information unique to each access session and uses the new key to re-encrypt the information, and then erases the new key. The data processing center also computes the new key so that the data processing center can provide an access code including the new key for the next request for access.